2026 CVE Vulnerabilities
49,039 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-10884 | HIGH | 8.3 | 0.3% | Jun 4, 2026 | Use after free in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the r... |
| CVE-2026-10883 | HIGH | 8.8 | 0.4% | Jun 4, 2026 | Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap co... |
| CVE-2026-10882 | HIGH | 8.8 | 0.5% | Jun 4, 2026 | Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code vi... |
| CVE-2026-10873 | HIGH | 7.3 | 2.7% | Jun 4, 2026 | A vulnerability was determined in Shibby Tomato 1.28.0000. Impacted is the function rstats_path of the file /bin/rstats ... |
| CVE-2026-10872 | HIGH | 7.3 | 2.6% | Jun 4, 2026 | A vulnerability was found in Shibby Tomato 1.28.0000. This issue affects the function start_vpnserver of the file /sbin/... |
| CVE-2026-11322 | HIGH | 7.1 | 0.3% | Jun 4, 2026 | Hermes WebUI prior to v0.51.221 contains a path traversal vulnerability that allows attackers to escape the workspace bo... |
| CVE-2026-10871 | HIGH | 7.3 | 2.2% | Jun 4, 2026 | A vulnerability has been found in Shibby Tomato 1.28.0000. This vulnerability affects the function start_6rd_tunnel of t... |
| CVE-2026-5066 | HIGH | 8.8 | 0.3% | Jun 4, 2026 | A potential out-of-bounds write/read exists in the TLS socket connect path of the network sockets subsystem (subsys/net/... |
| CVE-2026-10870 | HIGH | 7.3 | 2.2% | Jun 4, 2026 | A flaw has been found in Shibby Tomato 1.28.0000. This affects the function start_dhcpc of the file /sbin/rc of the comp... |
| CVE-2026-41522 | HIGH | 7.1 | 0.2% | Jun 4, 2026 | Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior... |
| CVE-2026-41518 | HIGH | 7.6 | 0.2% | Jun 4, 2026 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create c... |
| CVE-2026-41249 | HIGH | 8.2 | 0.4% | Jun 4, 2026 | CoreShop is a Pimcore enhanced eCommerce solution. In versions 5.0.1 through 5.1.0-beta.1,, the GitHub Actions workflow ... |
| CVE-2026-41237 | HIGH | 8.6 | 0.3% | Jun 4, 2026 | Froxlor is open source server administration software. In version 2.3.6 and earlier, the LOC record regex uses `\s+` whi... |
| CVE-2026-41236 | HIGH | 8.8 | 0.4% | Jun 4, 2026 | Froxlor is open source server administration software. Version 2.3.6 contains a symlink-following flaw in the root-owned... |
| CVE-2026-41235 | HIGH | 8.6 | 0.2% | Jun 4, 2026 | Froxlor is open source server administration software. Version 2.3.6 lets administrators configure `system.available_she... |
| CVE-2026-41234 | HIGH | 7.6 | 0.3% | Jun 4, 2026 | Froxlor is open source server administration software. Prior to version 2.3.7, the `DomainZones.add` API endpoint does n... |
| CVE-2026-40898 | HIGH | 7.5 | 0.3% | Jun 4, 2026 | quic-go is an implementation of the QUIC protocol in Go. Prior to version 0.59.1, an attacker can cause excessive memory... |
| CVE-2026-25551 | HIGH | 8.5 | 0.1% | Jun 4, 2026 | Seagull Software BarTender 2021 R1 through 12.0.1 contains an insecure deserialization vulnerability that allows low-pri... |
| CVE-2026-10796 | HIGH | 7.5 | 0.5% | Jun 4, 2026 | nvm (Node Version Manager) through 0.40.4 executes arbitrary commands from version strings supplied by the configured No... |
| CVE-2026-49942 | HIGH | 7.3 | 0.3% | Jun 4, 2026 | Net::CIDR::Set versions through 0.20 for Perl did not validate network masks. The mask portion of a network mask could ... |
| CVE-2026-49941 | HIGH | 7.5 | 0.3% | Jun 4, 2026 | Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses. The add method called the _encode method t... |
| CVE-2026-46741 | HIGH | 7.5 | 0.3% | Jun 4, 2026 | Etsy::StatsD versions through 1.002002 for Perl allow metric injections. The metric names and values are not checked fo... |
| CVE-2026-5228 | HIGH | 8.8 | 0.2% | Jun 4, 2026 | Improper Access Control, Missing Authorization vulnerability in Kurt Software Studio WriteUp Mobile App allows Accessing... |
| CVE-2026-44393 | HIGH | 7.4 | 0.2% | Jun 4, 2026 | An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not pe... |
| CVE-2026-43985 | HIGH | 8.8 | 0.1% | Jun 4, 2026 | Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose `configUp... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now